diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 32b3724c..95eebcd4 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -53,6 +53,10 @@ jobs:
           role-to-assume: ${{ secrets.AWS_ROLE_ARN }}
           aws-region: ${{ env.AWS_DEFAULT_REGION }}
 
+      - name: Upload zip to S3
+        run: |
+          nix-shell --run "aws s3 cp offchain/build/release.zip s3://pcsc-bucket/${GITHUB_SHA}.zip --region $AWS_DEFAULT_REGION"
+
       - name: Copy nix scopes to nix cache
         run: |
           nix build .#devShells.x86_64-linux.default --dry-run --json | jq -r '.[] | .drvPath + "^*"' \
diff --git a/flake.nix b/flake.nix
index cb6c406a..666e78af 100644
--- a/flake.nix
+++ b/flake.nix
@@ -76,6 +76,7 @@
           #
           # build tools
           #
+          awscli2
           bashInteractive
           blst
           cabal-install